ID CVE-2015-2526
Summary Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests, aka "MVC Denial of Service Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:.net_framework:4.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 12-10-2018 - 22:09)
Impact:
Exploitability:
CWE CWE-17
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
msbulletin via4
bulletin_id MS15-101
bulletin_url
date 2015-09-08T00:00:00
impact Elevation of Privilege
knowledgebase_id 3089662
knowledgebase_url
severity Important
title Vulnerabilities in .NET Framework Could Allow Elevation of Privilege
refmap via4
bid 76567
sectrack 1033493
Last major update 12-10-2018 - 22:09
Published 09-09-2015 - 00:59
Last modified 12-10-2018 - 22:09
Back to Top